mirror of
https://github.com/github/codeql.git
synced 2026-04-30 11:15:13 +02:00
expose arrayFunctionTaintStep in TaintTracking.qll
This commit is contained in:
@@ -263,6 +263,8 @@ module TaintTracking {
|
||||
}
|
||||
}
|
||||
|
||||
predicate arrayFunctionTaintStep = ArrayTaintTracking::arrayFunctionTaintStep/3;
|
||||
|
||||
/**
|
||||
* A taint propagating data flow edge for assignments of the form `o[k] = v`, where
|
||||
* `k` is not a constant and `o` refers to some object literal; in this case, we consider
|
||||
|
||||
@@ -52,7 +52,7 @@ private DataFlow::SourceNode argumentList(SystemCommandExecution sys, DataFlow::
|
||||
result = pred.backtrack(t2, t)
|
||||
or
|
||||
t = t2.continue() and
|
||||
ArrayTaintTracking::arrayFunctionTaintStep(result, pred, _)
|
||||
TaintTracking::arrayFunctionTaintStep(result, pred, _)
|
||||
)
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user